Firewall Traversal problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I am trying to configure two GNUGks as an internal gatekeeper and an 
external Border Controller as you would with the Tandberg Solution

I want to be able to dial public URIs from internal devices that the 
external GNUGk will find from SRV. I also want to recieve incoming srv 
calls to my domain and route them to the internal GK

I seem to be able to do one or the other but not both at the same time.

I have included neighbor in the routing for the external GK so that it 
can route incoming calls. If I have that then when making external URI 
calls the external GK seems to send an LRQ back to the internal GK which 
drops the call.  If I remove the neighbor routing the call goes through 
but obviously incoming calls would not be routed.

All the examples seem to refer to neighboring with VCSs rather than 
other GNUGks. Is there a recommended config for 2 GNUGks.

Have I missed something obvious?  Surely it shouldn't send an LRQ back 
to the neighbor that sent it an LRQ. (I have checked that all works fine 
neighboring to a GNUGK inside the firewall).

Thanks for your help.

External GK config

[RoutedMode]
GKRouted=1
H245Routed=1
CallSignalPort=1720
RemoveH245AddressOnTunneling=1
DropCallsByReleaseComplete=1
SupportNATedEndpoints=0
AcceptUnregisteredCalls=1
Q931PortRange=30000-30999
H245PortRange=31000-31999
EnableH46018=1
H46018NoNat=0
EnableH46023=1


[Proxy]
Enable=0
RTPPortRange=50000-59999
RTPMultiplexing=1

[RasSrv::LRQFeatures]
AcceptNonNeighborLRQ=1

[RoutingPolicy]
default=explicit,internal,neighbor,srv,dns


[RasSrv::Neighbors]
GK2=GnuGk


[Neighbor::GK2]
GatekeeperIdentifier=GK2
Host=pub.pub.pub.pub
SendPrefixes=*
AcceptPrefixes=*
H46018Client=0
H46018Server=1
AuthUser=***
Password=***
ForwardLRQ=always

Internal GK config

[RoutedMode]
GKRouted=1
H245Routed=1
CallSignalPort=1720
RemoveH245AddressOnTunneling=1
DropCallsByReleaseComplete=1
SupportNATedEndpoints=0
AcceptUnregisteredCalls=1
Q931PortRange=30000-30999
H245PortRange=31000-31999
EnableH46018=0
H46018NoNat=0
EnableH46023=0


[Proxy]
Enable=0
RTPPortRange=50000-59999
RTPMultiplexing=1

[RasSrv::LRQFeatures]
AcceptNonNeighborLRQ=0

[RoutingPolicy]
default=explicit,internal,neighbor,catchall

[Routing::CatchAll]
CatchAllIP=ep.ep.ep.ep


[RasSrv::Neighbors]
GK3=GnuGk

[Neighbor::GK3]
GatekeeperIdentifier=GK3
Host=ext.ext.ext.ext:1719
SendPrefixes=*
AcceptPrefixes=*
H46018Client=1
H46018Server=0
SendAuthUser=***
SendPassword=***
;ForwardHopCount=2
ForwardLRQ=always



External GNUGk (Border Controller) log of sending LRQ back when making 
external call


    }
      h245Tunneling = false
    }
  }
}
2012/02/16 17:07:31.311	4	ProxyChannel.cxx(2422)	Q931s	
GWRewrite source for pub.pub.pub.pub:30048: neighbor or explicit IP
2012/02/16 17:07:31.313	5	     Routing.cxx(200)	ROUTING	
Checking policy Explicit for request Setup CRV=29424
2012/02/16 17:07:31.313	5	     Routing.cxx(200)	ROUTING	
Checking policy Internal for request Setup CRV=29424
2012/02/16 17:07:31.313	5	     Routing.cxx(200)	ROUTING	
Checking policy Neighbor for request Setup CRV=29424
2012/02/16 17:07:31.314	3	      RasSrv.cxx(239)	RAS	Send 
to pub.pub.pub.pub:1719
locationRequest {
    requestSeqNum = 72
    destinationInfo = 1 entries {
      [0]=url_ID "loopback@xxxxxxxxx"
    }
    nonStandardData = {
      nonStandardIdentifier = h221NonStandard {
        t35CountryCode = 138
        t35Extension = 1
        manufacturerCode = 2
      }
      data =  3 octets {
        47 4b 32                                           GK2
      }
    }
    replyAddress = ipAddress {
      ip =  4 octets {
        58 61 ab 84                                        Xa..
      }
      port = 1719
    }
    sourceInfo = 2 entries {
      [0]=dialedDigits "93441122"
      [1]=url_ID "mirial@xxxxxxxxxxx"


Internal GNuGK log of receiving LRQ when making external call

    canMapSrcAlias = false
  }
2012/02/16 17:07:19.106	5	         job.cxx(191)	JOB	
Starting Job LRQ at Worker thread 3072043888
2012/02/16 17:07:19.107	1	      RasSrv.cxx(356)	RAS	LRQ 
Received from ext.ext.ext.ext:1719
2012/02/16 17:07:19.108	5	       Routing.h(190)	ROUTING	
Checking policy Explicit for the request LRQ 72
2012/02/16 17:07:19.108	5	       Routing.h(190)	ROUTING	
Checking policy Internal for the request LRQ 72
2012/02/16 17:07:19.109	5	       Routing.h(190)	ROUTING	
Checking policy Neighbor for the request LRQ 72
2012/02/16 17:07:19.110	5	         job.cxx(351)	JOB	
Worker threads: 12 total - 12 busy, 0 idle
2012/02/16 17:07:19.111	5	       Routing.h(190)	ROUTING	
Checking policy CatchAllPolicy for the request LRQ 72
2012/02/16 17:07:19.113	5	       Routing.h(193)	ROUTING	
Policy CatchAllPolicy applied to the request LRQ 72
2012/02/16 17:07:19.114	2	      RasSrv.cxx(395)	
LCF|ext.ext.ext.ext|ep.ep.ep.ep:1720|loopback@xxxxxxxxx:url_ID
2012/02/16 17:07:19.114	3	      RasSrv.cxx(239)	RAS	Send 
to ext.ext.ext.ext:1719
locationConfirm {
    requestSeqNum = 72
    callSignalAddress = ipAddress {
      ip =  4 octets {
        c0 a8 89 15                                        ....
      }
      port = 1720
    }
    rasAddress = ipAddress {
      ip =  4 octets {
        c0 a8 89 15                                        ....
      }
      port = 1719
    }
  }
2012/02/16 17:07:19.114	5	      RasSrv.cxx(251)	RAS	Sent 
Successful
2012/02/16 17:07:19.115	5	         job.cxx(403)	JOB	Job 
LRQ deleted
2012/02/16 17:07:19.116	5	         job.cxx(393)	JOB	
Worker threads: 12 total - 11 busy, 1 idle
2012/02/16 17:07:19.136	4	      RasSrv.cxx(218)	RAS	
Receiving on int.int.int.int:1719(U)
2012/02/16 17:07:19.137	2	      RasSrv.cxx(174)	RAS	Read 
from ext.ext.ext.ext:1719
2012/02/16 17:07:19.137	3	      RasSrv.cxx(227)	RAS


------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/


[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux